← Back to browse · API

CVE-2022-45497

Severity

CRITICAL

CVSS

9.8

EPSS

0.02461

Risk score

40.06

CISA KEV

No

PoC

No

Published

2022-12-08

Modified

2025-04-23

First seen

2026-08-07

Aliases

EUVD-2022-48363, GHSA-PFW9-5VX2-RM8M

Products

n/a:n/a n/a

Sources

euvd EUVD-2022-48363

Description

Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand.

References